Phpoutsourcing Zorum
12 CVEs affecting Phpoutsourcing Zorum. Latest disclosed: 2006-10-20. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2006-5431 | | 2006-10-20 | PHP remote file inclusion vulnerability in gorum/dbproperty.php in PHPOutsourcing Zorum 3.5 and earlier allows remote attackers to execute arbitrary PHP code v… | |
CVE-2006-3333 | | 2006-06-30 | Cross-site scripting (XSS) vulnerability in index.php in Zorum Forum 3.5 allows remote attackers to inject web script or HTML via the multiple unspecified para… | |
CVE-2006-3332 | | 2006-06-30 | SQL injection vulnerability in index.php in Zorum Forum 3.5 allows remote attackers to execute arbitrary SQL commands via the (1) offset, (2) tid, (3) fromid… | |
CVE-2005-4619 | | 2005-12-31 | SQL injection vulnerability in index.php in phpoutsourcing Zorum Forum 3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the rollid… | |
CVE-2005-2652 | | 2005-08-23 | Zorum 3.5 allows remote attackers to obtain the full installation path via direct requests to (1) gorum/notification.php, (2) user.php, (3) attach.php, (4) bla… | |
CVE-2005-2651 | | 2005-08-23 | gorum/prod.php in Zorum 3.5 allows remote attackers to execute arbitrary code via shell metacharacters in the argv parameter. | |
CVE-2005-0676 | | 2005-05-04 | index.php in Zorum 3.5 allows remote attackers to trigger an SQL error, and possibly inject arbitrary SQL commands, via the search capability. | |
CVE-2005-0677 | | 2005-05-02 | index.php for Zorum 3.5 allows remote attackers to perform certain actions as other users by modifying the id parameter. | |
CVE-2005-0675 | | 2005-05-02 | Cross-site scripting (XSS) vulnerability in index.php for Zorum 3.5 allows remote attackers to inject arbitrary web script or HTML via the (1) list or (2) from… | |
CVE-2003-1089 | | 2003-12-31 | index.php for Zorum 3.4 allows remote attackers to determine the full path of the web root via invalid parameter names, which reveals the path in a PHP error m… | |
CVE-2003-1088 | | 2003-08-11 | Cross-site scripting (XSS) vulnerability in index.php for Zorum 3.4 and 3.5 allows remote attackers to inject arbitrary web script or HTML via the method param… | |
CVE-2002-2350 | | 2002-12-31 | Cross-site scripting (XSS) vulnerability in z_user_show.php in dbtreelistproperty_method.php in Zorum 2.4 allows remote attackers to inject arbitrary web scrip… |